bump(deps-dev): bump google-adk from 2.5.0 to 2.6.0

[dependabot]

Bumps google-adk from 2.5.0 to 2.6.0.

Release notes

Sourced from google-adk's releases.

v2.6.0

2.6.0 (2026-07-29)

Features

• a2a: support per-invocation auth headers when fetching agent cards (3dd1156)
• add --extra_packages option to adk deploy agent_engine (93db97d), closes #3936
• Add ADK evaluation samples: shared home-automation agent (6ba41ef)
• add agent identity auth manager finalize endpoint for 3 legged OAuth flow with auth manager (8d2ded3)
• Add basic_criteria ADK eval sample (fdebd9d)
• Add bigquery-graph skill to ADK BigQuery tools (f1a0a14)
• add capability to log commands run in CLI (a58220c)
• Add custom_metric ADK eval sample (f71d9df)
• Add llm_judge_match ADK eval sample (0f0fa6b)
• add metadata extraction symmetry to A2A converters (3127f36)
• add opt-in final_response_tool_names to BigQueryAgentAnalyticsPlugin (07455ee)
• Add ReflectAndRetryModelPlugin for self-healing model errors (322f455)
• Add rubric_criteria ADK eval sample (852a66a)
• add state_delta support to LiveRequest for live mode (8219774), closes #4220
• add telemetry consent check, status commands, and interrupt safety to CLI (6bab08f)
• Add telemetry consent configuration endpoints and local writing utility (26f3d45)
• add telemetry metrics collection for ADK CLI execution (2280f1c)
• Add test_file_vs_evalset ADK eval sample (57a34ba)
• Add user_simulation ADK eval sample (481fe21)
• agents: add instruction field to ManagedAgent (720af3d)
• agents: forward ManagedAgent instruction as system_instruction (49fdc26)
• eval: Make live and audio evals reachable via public entrypoints (5091f0a)
• eventarc: add Eventarc Advanced toolset for ADK (217a90a)
• eventarc: add Eventarc Advanced toolset for ADK (d4f157d)
• forward the OAuth2 nonce to the authorization request (79cc1f2), closes #2067
• integrations: add OCI Generative AI provider (625ef1a), closes #5069
• make agent evaluation compatible with pre-loaded artifacts (02e32a4), closes #2075
• make EventsCompactionConfig sliding-window fields optional (ec42cfa), closes #6398
• Publish companion constraints-3.11.txt and constraints-3.12.txt file for transitive dependency protection (4 day buffer to protect from supply chain attack) (75c773e)
• refresh expired OAuth2 tokens in OpenAPI credential exchanger (b3c9783)
• samples: add ManagedAgent create-and-use custom-agent sample (d86ae20)
• support audio generation user simulator (327afeb)
• support serving a to_a2a agent under a path prefix (1ae292f), closes #4448
• support user labels in RunConfig (13bef9c)
• telemetry: add request-driven metric export for Agent Engine (8930d9b)
• telemetry: derive gen_ai error.type from provider status code (b956d15)
• Update agent_registry to handle mTLS endpoints internally (66cf08d)

Bug Fixes

• a2a: honor task cancellation instead of raising NotImplementedError (fb55d4a)
• agents: await cancelled tasks in pre-3.11 ParallelAgent merge (bc55099), closes #5297
• agents: skip output_key processing on intermediate conversational text in task-mode LlmAgent (54344ed)

... (truncated)

Changelog

Sourced from google-adk's changelog.

2.6.0 (2026-07-29)

BREAKING CHANGES

• artifacts: namespace file artifacts by app (f72f0db)
• require patched async LangGraph runtime and update graph field type (551372b)

Features

• a2a: support per-invocation auth headers when fetching agent cards (3dd1156)
• add --extra_packages option to adk deploy agent_engine (93db97d), closes #3936
• Add ADK evaluation samples: shared home-automation agent (6ba41ef)
• add agent identity auth manager finalize endpoint for 3 legged OAuth flow with auth manager (8d2ded3)
• Add basic_criteria ADK eval sample (fdebd9d)
• Add bigquery-graph skill to ADK BigQuery tools (f1a0a14)
• add capability to log commands run in CLI (a58220c)
• Add custom_metric ADK eval sample (f71d9df)
• Add llm_judge_match ADK eval sample (0f0fa6b)
• add metadata extraction symmetry to A2A converters (3127f36)
• add opt-in final_response_tool_names to BigQueryAgentAnalyticsPlugin (07455ee)
• Add ReflectAndRetryModelPlugin for self-healing model errors (322f455)
• Add rubric_criteria ADK eval sample (852a66a)
• add state_delta support to LiveRequest for live mode (8219774), closes #4220
• add telemetry consent check, status commands, and interrupt safety to CLI (6bab08f)
• Add telemetry consent configuration endpoints and local writing utility (26f3d45)
• add telemetry metrics collection for ADK CLI execution (2280f1c)
• Add test_file_vs_evalset ADK eval sample (57a34ba)
• Add user_simulation ADK eval sample (481fe21)
• agents: add instruction field to ManagedAgent (720af3d)
• agents: forward ManagedAgent instruction as system_instruction (49fdc26)
• eval: Make live and audio evals reachable via public entrypoints (5091f0a)
• eventarc: add Eventarc Advanced toolset for ADK (217a90a)
• eventarc: add Eventarc Advanced toolset for ADK (d4f157d)
• forward the OAuth2 nonce to the authorization request (79cc1f2), closes #2067
• integrations: add OCI Generative AI provider (625ef1a), closes #5069
• make agent evaluation compatible with pre-loaded artifacts (02e32a4), closes #2075
• make EventsCompactionConfig sliding-window fields optional (ec42cfa), closes #6398
• Publish companion constraints-3.11.txt and constraints-3.12.txt file for transitive dependency protection (4 day buffer to protect from supply chain attack) (75c773e)
• refresh expired OAuth2 tokens in OpenAPI credential exchanger (b3c9783)
• samples: add ManagedAgent create-and-use custom-agent sample (d86ae20)
• support audio generation user simulator (327afeb)
• support serving a to_a2a agent under a path prefix (1ae292f), closes #4448
• support user labels in RunConfig (13bef9c)
• telemetry: add request-driven metric export for Agent Engine (8930d9b)
• telemetry: derive gen_ai error.type from provider status code (b956d15)
• Update agent_registry to handle mTLS endpoints internally (66cf08d)

... (truncated)

Commits

• a5791da chore: update last-release-sha for next main release
• 0ebac26 chore(release/candidate): release 2.6.0 (#6515)
• 7fd8760 perf: avoid quadratic text/audio accumulation in streaming
• b3c9783 feat: refresh expired OAuth2 tokens in OpenAPI credential exchanger
• a58220c feat: add capability to log commands run in CLI
• 8207880 fix: do not mount a cluster credential into the GKE code sandbox
• eee700a fix: harden A2A metadata serialization and parser type validation
• 802a079 fix: populate finish_reason on Anthropic LLM responses
• 8882ed6 chore: fix mypy strict type errors in adk a2a
• ba17367 fix: send the bare input_schema payload from AgentTool again
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[Nicola Franco (franconicola)]

LGTM